| 96 | |
| 97 | == Attachment Permissions |
| 98 | |
| 99 | Attachment permissions are handled by `LegacyAttachmentPolicy`, and unlike the permissions discussed so far attachment permissions are not directly granted. Rather, the ability to create, view and delete attachments is determined by the attachment's parent realm and permissions the user possess for that realm. |
| 100 | |
| 101 | The attachment actions are determined by the following |
| 102 | permissions in the ticket, wiki and milestone realms: |
| 103 | {{{#!table class="listing" |
| 104 | ||= Granted By: =||= Ticket =||= Wiki =||= Milestone =|| |
| 105 | || `ATTACHMENT_CREATE` || `TICKET_APPEND` || `WIKI_MODIFY` || `MILESTONE_MODIFY` || |
| 106 | || `ATTACHMENT_VIEW` || `TICKET_VIEW` || `WIKI_VIEW` || `MILESTONE_VIEW` || |
| 107 | || `ATTACHMENT_DELETE` || `TICKET_ADMIN` || `WIKI_DELETE` || `MILESTONE_DELETE` || |
| 108 | }}} |